summaryrefslogtreecommitdiff
path: root/net/bluetooth
AgeCommit message (Expand)Author
2026-06-19Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsigMichael Bommarito
2026-06-19Bluetooth: hci_sync: reject oversized Broadcast Announcement prependYuqi Xu
2026-06-19Bluetooth: MGMT: Fix backward compatibility with userspaceLuiz Augusto von Dentz
2026-06-19Bluetooth: fix memory leak in error path of hci_alloc_dev()Bharath Reddy
2026-06-19Bluetooth: bnep: reject short frames before parsingZhang Cen
2026-06-19Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension ha...Dudu Lu
2026-06-19Bluetooth: RFCOMM: validate skb length in MCC handlersSeungJu Cheon
2026-06-19Bluetooth: MGMT: validate advertising TLV before type checksZhang Cen
2026-06-19Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()Zhang Cen
2026-06-19Bluetooth: hci_conn: fix potential UAF in set_cig_params_syncPauli Virtanen
2026-06-19Bluetooth: hci_sync: fix UAF in hci_le_create_cis_syncDoruk Tan Ozturk
2026-06-19Bluetooth: ISO: serialize iso_sock_clear_timer with socket lockMuhammad Bilal
2026-06-19Bluetooth: ISO: fix UAF in iso_recv_frameMuhammad Bilal
2026-06-19Bluetooth: HIDP: fix missing length checks in hidp_input_report()Muhammad Bilal
2026-06-19Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !connSiwei Zhang
2026-06-19Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()Siwei Zhang
2026-06-19Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rspLuiz Augusto von Dentz
2026-06-19Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration successZhenghang Xiao
2026-06-19Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()Zhao Dongdong
2026-06-01Bluetooth: serialize accept_q accessJiexun Wang
2026-06-01Bluetooth: MGMT: validate Add Extended Advertising Data lengthMichael Bommarito
2026-06-01Bluetooth: bnep: Fix UAF read of dev->nameJann Horn
2026-06-01Bluetooth: ISO: drop ISO_END frames received without prior ISO_STARTDavid Carlier
2026-06-01Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()Safa Karakuş
2026-05-23Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rspDudu Lu
2026-05-23Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFERPauli Virtanen
2026-05-23Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTULuiz Augusto von Dentz
2026-05-17Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_completeLuiz Augusto von Dentz
2026-05-17Bluetooth: MGMT: Fix memory leak in set_ssp_completeJianpeng Chang
2026-05-17Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()Siwei Zhang
2026-05-17Bluetooth: hci_conn: fix potential UAF in create_big_syncDavid Carlier
2026-05-17Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()Siwei Zhang
2026-05-17Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()Siwei Zhang
2026-05-17Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_com...Luiz Augusto von Dentz
2026-05-17Bluetooth: hci_event: fix potential UAF in SSP passkey handlersShuvam Pandey
2026-05-17Bluetooth: MGMT: Fix possible UAFsLuiz Augusto von Dentz
2026-04-11Bluetooth: SMP: force responder MITM requirements before building the pairing...Oleh Konko
2026-04-11Bluetooth: SMP: derive legacy responder STK authentication from MITM stateOleh Konko
2026-04-11Bluetooth: MGMT: validate mesh send advertising payload lengthKeenan Dong
2026-04-11Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evtPauli Virtanen
2026-04-11Bluetooth: MGMT: validate LTK enc_size on loadKeenan Dong
2026-04-11Bluetooth: SCO: fix race conditions in sco_sock_connect()Cen Zhang
2026-04-11Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediatePauli Virtanen
2026-04-02Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loopHyunwoo Kim
2026-04-02Bluetooth: hci_sync: Remove remaining dependencies of hci_requestLuiz Augusto von Dentz
2026-04-02Bluetooth: Remove 3 repeated macro definitionsZijun Hu
2026-04-02Bluetooth: L2CAP: Fix send LE flow credits in ACL linkZhang Chen
2026-04-02Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cbHelen Koike
2026-04-02Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_holdHyunwoo Kim
2026-04-02Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecre...Hyunwoo Kim